Solution Architect, Identity and Access Management

DUIT; Arbutus (MD); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

No red tape

Competitive salaries

Health/Dental/Vision/Other Insurance

Excellent 401K plans

11 Paid Holidays & PTO

Educational Reimbursement

Limitless environment

Recognition of outstanding work

Opportunities for advancement

Job summary

DUIT, a Maryland-based identity and cybersecurity firm, is building a team to modernize identity management for a large public university. You will own the end-to-end target architecture, from Workday origins to Entra ID and Active Directory flow, and provisioning off legacy PeopleSoft identity flags.

You will turn assessment findings into a future-state design and a migration plan. The position is contingent on contract award, with anticipated start in February 2027, offering a high-impact,

Qualifications

• 8+ years in identity and access management
• Experience designing identity solutions for large enterprises
• HR-driven provisioning from Workday to Entra ID/AD with attribute mapping

Responsibilities

• Assess current identity architecture across Workday, Entra ID, and AD and design a centralized, scalable future-state architecture
• Define authoritative sources, ownership, and attribute mappings for governance and provisioning
• Design Workday-driven inbound provisioning to Entra ID and AD, including synchronization and just-in-time provisioning
• Trace PeopleSoft identity flag dependencies and architect migration sequencing, testing, and rollback
• Define standard integration patterns for SSO, SCIM provisioning, deprovisioning, and role assignment across third-party apps
• Produce architecture diagrams, decision records, and roadmaps and present in workshops

Skills

Identity & access management

Enterprise architecture

Workday provisioning

Entra ID/AD

RBAC governance

Facilitation/communication

Tools

Entra ID

Active Directory

Workday

SCIM

SAML

OIDC

Job description

DUIT, a Maryland-based identity and cybersecurity firm, is building a team to modernize identity management for a large public university. You will own the end-to-end target architecture:

• how identities originate in Workday;
• how they flow through Microsoft Entra ID and Active Directory to third-party applications;
• how provisioning moves off legacy PeopleSoft identity flags.

You will turn assessment findings into a future-state design and a migration plan.

Position is contingent on contract award. Anticipated start: February 2027

Why work for us?

• No red tape!
• Competitive salaries
• Great Health/Dental/Vision/Other Insurance Benefits
• Excellent 401K plans
• 11 Paid Company Holidays & PTO Tiers
• Educational Reimbursement Programs
• Limitless environment where you matter
• Recognition of outstanding work and other employee incentives
• Opportunities for advancement

Davis Unlimited Information Technologies (DUIT) is a Baltimore-based AI andcybersecurityfirm working at the cutting edge ofpost-quantumcryptography, AI development, and federalcybersecuritycompliance. Founded in 2010, DUIT supports mission-critical government and critical infrastructure environments — including DoD, and federal civilian agencies. Our leadership team includes a U.S. military veteran with active security clearances, and we proudly support a mission-driven culture that values service, integrity, and national security. We are a federally certified woman-owned and minority-owned small business, giving our team the opportunity to work on high-impact federal contracts and emerging technologies that directly impact national security."Securing the Future through AI andQuantum-Resilient Innovation."

We have opportunities for advancement, and our salaries and benefits are competitive. We are an equal opportunity employer; check us out on the web at https://www.duit.us. You can follow us on LinkedIn, X, and Facebook. We do things differently, contact us to find out how...Together, we can DUIT!

What you will do

• Assess the current identity architecture across Workday, Entra ID, and Active Directory, and design a centralized, scalable future-state architecture with Workday as the originating identity provider.
• Define authoritative sources, attribute ownership, and attribute mappings, including organization codes, so identity data supports governance, provisioning, and RBAC.
• Design Workday-driven inbound provisioning to Entra ID and Active Directory, including synchronization, writeback, and just-in-time provisioning.
• Trace PeopleSoft identity flag and persona dependencies across applications, integrations, and scripts, and architect the decoupling, migration sequencing, testing, and rollback approach.
• Define standard integration patterns for SSO, SCIM provisioning, deprovisioning, and role assignment across third-party applications, plus interim patterns for applications that can’t integrate yet.
• Produce architecture diagrams, decision records, and roadmaps that business and technical stakeholders can act on, and present them in workshops as clear, accessible deliverables.

What you bring

• 8+ years in identity and access management, including at least 4 years as an architect designing identity solutions for large enterprises.
• Hands-on design of HR-driven provisioning from Workday (or a comparable HR system) into Entra ID and Active Directory, including attribute mapping and source-of-truth design.
• Deep knowledge of Microsoft Entra ID and Active Directory: hybrid sync (Entra Connect or Cloud Sync), enterprise applications, and app provisioning. Working knowledge of SAML, OpenID Connect, OAuth 2.0, and SCIM.
• Experience leading a migration off a legacy identity source or provisioning system, including dependency mapping, sequencing, testing, and rollback planning.
• Strong writing and facilitation skills; able to explain architecture trade-offs to non-technical owners.

Preferred

• Identity work in higher education (multiple affiliations, students, faculty, adjuncts, alumni), PeopleSoft identity configurations, and familiarity with FERPA and the eduPerson schema.
• Certifications such as Microsoft SC-100 or SC-300, a Workday integration certification, TOGAF, CISSP, or CIDPRO.
• Experience aligning identity architecture to NIST CSF 2.0 or NIST SP 800-53.